$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/296C190484AD11EC9C3F837CC4F9AE02.roa File: 296C190484AD11EC9C3F837CC4F9AE02.roa (raw, json) Hash identifier: 30fVbVXq/CoDMc17wH079VESP30cAy3Gw17NlarsviE= Subject key identifier: 3F:79:5D:06:CD:75:80:44:F2:32:C7:40:DF:D4:F1:31:BB:59:44:92 Certificate issuer: /CN=A91CE616/serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A Certificate serial: 02F3 Authority key identifier: 50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/296C190484AD11EC9C3F837CC4F9AE02.roa Signing time: Sun 03 Mar 2024 02:55:04 +0000 ROA not before: Sun 03 Mar 2024 02:55:04 +0000 ROA not after: Thu 01 May 2025 00:00:00 +0000 asID: 138041 IP address blocks: 103.161.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 May 2024 02:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 755 (0x2f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE616/serialNumber=50C3FD12F6A3315819B52BABCC198FB0DBFD413A Validity Not Before: Mar 3 02:55:04 2024 GMT Not After : May 1 00:00:00 2025 GMT Subject: CN=65e3e687-126e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ad:d1:38:ee:45:f9:1b:b6:60:65:eb:bc:2f: f6:cc:a3:fd:a0:c1:82:74:3b:05:bc:97:d3:12:04: df:4f:20:5e:22:8e:5c:c9:02:25:84:3a:8d:93:99: c4:03:d6:69:8a:6d:cc:dd:d9:d5:64:c3:ab:26:6f: 6c:8e:27:38:df:62:57:95:84:c1:52:82:bd:88:c6: ee:13:7e:b0:bb:cf:a2:ea:63:a0:d6:09:6d:57:a2: 5b:15:df:cf:29:1f:23:b4:20:64:2b:8c:40:3f:d5: d0:9f:b1:be:dd:64:d5:d1:46:e4:7f:71:1a:cd:92: 10:f1:98:08:b9:dc:e8:1a:ef:fc:d4:d6:87:78:32: 50:84:eb:ef:7f:a9:30:ce:0d:4c:c1:ba:0c:af:1a: 3c:4a:57:af:af:24:a1:09:6e:a1:3e:e8:1b:4e:f6: 1a:bd:01:44:66:a9:02:32:46:5f:86:ec:53:9c:38: 81:e5:58:c5:c8:58:c3:49:74:5c:30:c0:df:27:68: 08:16:40:39:9c:da:90:1e:9a:35:2e:48:5a:45:9a: b7:c6:7f:9b:16:3a:56:a9:89:45:5c:e5:eb:d7:31: f3:b8:44:1a:ca:bc:61:17:b0:54:a8:6b:b3:9c:47: 18:4e:50:ca:b8:f8:5a:bb:16:b8:c0:60:47:f2:4a: 40:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:79:5D:06:CD:75:80:44:F2:32:C7:40:DF:D4:F1:31:BB:59:44:92 X509v3 Authority Key Identifier: keyid:50:C3:FD:12:F6:A3:31:58:19:B5:2B:AB:CC:19:8F:B0:DB:FD:41:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/UMP9EvajMVgZtSurzBmPsNv9QTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UMP9EvajMVgZtSurzBmPsNv9QTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE616/A7E4291684A811ECB2500871C4F9AE02/296C190484AD11EC9C3F837CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.161.136.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:b1:db:f1:8a:0a:49:1e:bf:17:6d:33:50:8b:57:92:8f:db: 62:3a:b9:a2:53:48:10:c6:bb:5a:76:86:19:63:58:b8:aa:39: fb:7b:f4:26:42:b2:82:c0:5d:18:0a:bb:d6:79:03:de:e4:94: 6e:41:1e:b4:36:89:1d:b6:02:c4:b6:4f:e0:bb:62:39:9d:b2: 52:92:13:11:2e:57:6d:c1:d7:7c:3f:0e:c2:9d:be:7d:72:62: ea:45:16:5d:69:a4:ea:e9:cd:a1:5f:98:59:c1:80:b6:d2:0f: 67:bd:90:e1:06:40:29:98:7b:ce:5b:33:52:49:7f:87:e5:ac: b8:ef:46:44:c8:82:70:88:68:65:b1:74:7f:11:32:b0:74:2e: 60:f5:d0:af:d7:85:75:6a:e2:7e:80:5c:7f:2f:98:13:ac:25: 38:06:29:cd:07:84:80:36:4b:32:5d:b0:f8:f5:a7:24:5a:5b: dc:74:be:f9:c6:66:82:fb:8b:ec:26:46:a6:9a:74:d8:7a:59: 18:42:15:2e:f9:ce:58:27:78:9b:54:a1:93:25:94:3a:00:df: d7:75:bd:f0:9a:41:1b:5f:c5:8f:6c:16:f7:13:55:d8:e4:a4: 9b:26:1d:20:0d:1f:5a:97:11:87:03:9f:b2:de:94:eb:c1:42: 29:dc:07:e9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2MTYxMTAvBgNVBAUTKDUwQzNGRDEyRjZBMzMxNTgxOUI1MkJBQkNDMTk4RkIw REJGRDQxM0EwHhcNMjQwMzAzMDI1NTA0WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02NWUzZTY4Ny0xMjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAya3ROO5F+Ru2YGXrvC/2zKP9oMGCdDsFvJfTEgTfTyBeIo5cyQIlhDqNk5nE A9Zpim3M3dnVZMOrJm9sjic432JXlYTBUoK9iMbuE36wu8+i6mOg1gltV6JbFd/P KR8jtCBkK4xAP9XQn7G+3WTV0Ubkf3EazZIQ8ZgIudzoGu/81NaHeDJQhOvvf6kw zg1MwboMrxo8SlevryShCW6hPugbTvYavQFEZqkCMkZfhuxTnDiB5VjFyFjDSXRc MMDfJ2gIFkA5nNqQHpo1LkhaRZq3xn+bFjpWqYlFXOXr1zHzuEQayrxhF7BUqGuz nEcYTlDKuPhauxa4wGBH8kpAAwIDAQABo4IClTCCApEwHQYDVR0OBBYEFD95XQbN dYBE8jLHQN/U8TG7WUSSMB8GA1UdIwQYMBaAFFDD/RL2ozFYGbUrq8wZj7Db/UE6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTYxNi9BN0U0MjkxNjg0 QTgxMUVDQjI1MDA4NzFDNEY5QUUwMi9VTVA5RXZhak1WZ1p0U3VyekJtUHNOdjlR VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VNUDlFdmFqTVZnWnRTdXJ6Qm1Qc052OVFUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0U2MTYvQTdFNDI5MTY4NEE4MTFFQ0IyNTAwODcxQzRGOUFFMDIvMjk2QzE5MDQ4 NEFEMTFFQzlDM0Y4MzdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnoYgwDQYJKoZIhvcNAQELBQADggEBAHyx2/GKCkkevxdt M1CLV5KP22I6uaJTSBDGu1p2hhljWLiqOft79CZCsoLAXRgKu9Z5A97klG5BHrQ2 iR22AsS2T+C7YjmdslKSExEuV23B13w/DsKdvn1yYupFFl1ppOrpzaFfmFnBgLbS D2e9kOEGQCmYe85bM1JJf4flrLjvRkTIgnCIaGWxdH8RMrB0LmD10K/XhXVq4n6A XH8vmBOsJTgGKc0HhIA2SzJdsPj1pyRaW9x0vvnGZoL7i+wmRqaadNh6WRhCFS75 zlgneJtUoZMllDoA39d1vfCaQRtfxY9sFvcTVdjkpJsmHSANH1qXEYcDn7LelOvB QincB+k= -----END CERTIFICATE-----Generated at Thu May 23 03:48:42 2024 by rpki-client on console-fra.rpki-client.org